CVE-2026-106019highCWE-532

CVE-2026-106019: high-severity vulnerability in Johnson Controls C-CURE 9000, Victor

Published

Follow this CVE+ Monitor C-CURE 9000, Victor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8
Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials. This issue affects C-CURE 9000, Victor: 3.20.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L
Affected products
Johnson Controls · C-CURE 9000, Victor